This is an excellent article by Xavier Mertens, with a video that demonstrates how a keylogger on your computer will defeat even the most complex of passwords.
A Python MP3 Player with Builtin Keylogger Capability – SANS Internet Storm Center
Your takeaway from this
Have a policy in place stating that only authorised software may be installed and used and have a means in place to check that this policy is implemented.
Clive Catton MSc (Cyber Security) – by-line and other articles